check-for-secrets

Name: check-for-secrets
Author: TT-PSC-S-A-Partner-Demo

Act as a secure code reviewer analyzing this file for **hardcoded secrets**, API keys, tokens, credentials, or other sensitive information.

by TT-PSC-S-A-Partner-Demo(0) 0 installs

Free

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Prompt file imported from TT-PSC-S-A-Partner-Demo/bstok.ms-demo (.github/prompts/check-for-secrets.prompt.md). Copyright stays with the author.

🔐 Prompt: Hardcoded Secrets & Credential Audit

Act as a secure code reviewer analyzing this file for hardcoded secrets, API keys, tokens, credentials, or other sensitive information.

Flag any of the following patterns:

API keys, access tokens, client secrets, or passwords embedded as string literals
Usage of process.env in frontend code or without proper runtime protection
Sensitive values written to .env, .properties, or appsettings.json files without secret management
OAuth tokens, JWTs, or HMAC secrets stored or logged in plaintext
Secrets stored in comments, JSON blobs, test configs, or logs

Highlight these with comments or suggested changes. Recommend usage of a secure vault (e.g. Azure Key Vault, AWS Secrets Manager, CyberArk Conjur) and explain the risk of each finding.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

# 🔐 Prompt: Hardcoded Secrets & Credential Audit

Act as a secure code reviewer analyzing this file for **hardcoded secrets**, API keys, tokens, credentials, or other sensitive information.

Flag any of the following patterns:

- API keys, access tokens, client secrets, or passwords embedded as string literals
- Usage of `process.env` in frontend code or without proper runtime protection
- Sensitive values written to `.env`, `.properties`, or `appsettings.json` files without secret management
- OAuth tokens, JWTs, or HMAC secrets stored or logged in plaintext
- Secrets stored in comments, JSON blobs, test configs, or logs

Highlight these with comments or suggested changes. Recommend usage of a secure vault (e.g. Azure Key Vault, AWS Secrets Manager, CyberArk Conjur) and explain the risk of each finding.

Manifest

The prompt text and its fill-in variables. Copy it or fetch it by URL from your own code.

tt-psc-s-a-partner-demo-bstok-ms-demo-check-for-secrets-prompt.prompt.jsonjson

{
  "prompt": "# 🔐 Prompt: Hardcoded Secrets & Credential Audit\n\nAct as a secure code reviewer analyzing this file for **hardcoded secrets**, API keys, tokens, credentials, or other sensitive information.\n\nFlag any of the following patterns:\n\n- API keys, access tokens, client secrets, or passwords embedded as string literals\n- Usage of `process.env` in frontend code or without proper runtime protection\n- Sensitive values written to `.env`, `.properties`, or `appsettings.json` files without secret management\n- OAuth tokens, JWTs, or HMAC secrets stored or logged in plaintext\n- Secrets stored in comments, JSON blobs, test configs, or logs\n\nHighlight these with comments or suggested changes. Recommend usage of a secure vault (e.g. Azure Key Vault, AWS Secrets Manager, CyberArk Conjur) and explain the risk of each finding.",
  "variables": [],
  "notes": "Act as a secure code reviewer analyzing this file for **hardcoded secrets**, API keys, tokens, credentials, or other sensitive information.",
  "metadata": {
    "source": {
      "provider": "github-prompts",
      "repository": "https://github.com/TT-PSC-S-A-Partner-Demo/bstok.ms-demo",
      "path": ".github/prompts/check-for-secrets.prompt.md",
      "ref": "8c86e774d42d812fd8ad8c350ef20458d4a30a03",
      "url": "https://github.com/TT-PSC-S-A-Partner-Demo/bstok.ms-demo/blob/8c86e774d42d812fd8ad8c350ef20458d4a30a03/.github/prompts/check-for-secrets.prompt.md",
      "key": "TT-PSC-S-A-Partner-Demo/bstok.ms-demo/.github/prompts/check-for-secrets.prompt.md"
    }
  }
}

Fetch it by URL: GET /api/v1/registry/tt-psc-s-a-partner-demo-bstok-ms-demo-check-for-secrets-prompt/manifest?version=1.0.0

About

🔐 Prompt: Hardcoded Secrets & Credential Audit

Use it

Manifest

Reviews